I'm trying to setup a 2-tier server environment in Windows Server 2008, which I'm finding is a little different from XP or Server 2003. The web tier is using IIS and ASP.NET 3.5 and the database tier is using SQL Server 2008. The only services that I'm using there is the database engine, Integration services, and Reporting services.

What user account should the various Windows services be running as? Are there any other settings that I should be aware of when setting this up?

Additionally -- when you install your application on top of ASP.net and SQL Server, do not use the SA, or Administrator accounts. Your application should have its own restricted login and restricted SQL user.